Compass Brief — 2026-07-21 — EMEA

Executive Summary

Wildfire smoke across Minnesota is this window's primary exposure-qualified event, with approximately 431,860 contact-center and knowledge-worker seats across Minneapolis-St. Paul-Bloomington, Duluth, and St. Cloud at risk of degraded on-site attendance due to hazardous air quality conditions. All 12 monitored risk domains are active this window — none are quiet — placing the overall risk posture at Elevated, driven by concurrent severe weather across Poland and Spain, an open cyber espionage incident in Dallas-Fort Worth, and active geopolitical escalation affecting regional travel corridors. No Context events crossed the exposure threshold to earn Lead Highlight status; see the Top Operational-Risk Signals section appended below for full signal detail.

---

Lead Highlights

Minnesota Wildfire Smoke — Air Quality Degradation (~431,860 exposed seats)

Persistent wildfire smoke is affecting the Minneapolis-St. Paul-Bloomington, Duluth, and St. Cloud metro areas, producing hazardous or significantly degraded air quality conditions across one of the densest contact-center and knowledge-worker corridors in the US Upper Midwest. With approximately 431,860 seats in the blast radius, site operations face real attendance pressure: employees with respiratory conditions, long commutes, or limited work-from-home infrastructure are most exposed to absenteeism. On-site service levels, occupancy planning, and same-day shrinkage models for these three hubs should be stress-tested against elevated unplanned-absence scenarios for the duration of the smoke event.

---

Domain Watch

• weather — ACTIVE (54 signals, max sev 10, 3 open incidents): Severe weather is elevated across multiple regions simultaneously — Orange Gale Warning for central coastal Poland (Lodz), Red Thunderstorm warnings across Lubuskie Province (Gorzow Wielkopolski, Sulecinski, Gorzowski counties), extreme thunderstorm with orkan gusts and heavy hail in Kreis Anhalt-Bitterfeld (Germany), Severe Heat Warning for Madrid/Cinco Villas de Zaragoza (Spain), and a Tornado Watch across the US Midwest. Weather is the dominant domain by signal volume and severity this window.

• seismic — ACTIVE (55 signals, max sev 7.5): Venezuela earthquake death toll has reached 5,208; epicenter in La Guaira. No geo_density exposure match for this event.

• cyber — ACTIVE (23 signals, max sev 10, 1 open incident): HOLLOWGRAPH espionage campaign against Microsoft 365 Calendars remains open and active in Dallas-Fort Worth. CISA has added four known exploited vulnerabilities to its catalog (flagged to Des Moines but evaluated and denied for WFM nexus per G3 shelf).

• health — ACTIVE (17 signals, max sev 7.5): Congo Ebola outbreak has reached 930 deaths; epicenter in Bunia, DRC. No geo_density exposure match for this event.

• geopolitical — ACTIVE (29 signals, max sev 9): US-Iran military escalation is ongoing, with the US conducting a ninth night of strikes and the Strait of Hormuz standoff pushing oil above $90/barrel. Regional travel corridors across IR, BH, KW, JO, SY, AE, and SA are affected. Nigerian military has arrested individuals on suspected terrorist links in Ghana/Nigeria. No direct workforce exposure resolved for these events this window.

• supply_chain — ACTIVE (6 signals, max sev 7.5): US-Canada tariff escalation (proposed 50% tariff on Canadian goods) is active in Washington, D.C.; automotive sector uncertainty flagged in Windsor, Ontario.

• labor — ACTIVE (1 signal, max sev 6.5): Ford workers in Windsor, Ontario are voting on a tentative deal against a backdrop of USMCA uncertainty and tariff pressures. Romanian salary law dispute (PSD blocking current form of legislation) is also on the board.

• infrastructure — ACTIVE (4 signals, max sev 5): Widespread power outages affecting 21,767 customers across Polk, Dallas, and Marshall counties in Iowa (Des Moines metro most affected at 10,514 out). Catastrophe declaration in Chile's Coquimbo and Huasco provinces following a frontal weather system.

• travel — ACTIVE (49 signals, max sev 10, 3 open incidents): TfL Circle line is part-suspended in London. FAA ground stop and delay programs are active across the US Northeast Corridor (JFK/LGA/EWR/PHL/IAD/DCA/BOS). Heavy traffic congestion is ongoing in Dallas, TX. US-Iran escalation is driving a Strait of Hormuz travel crisis across the Gulf region.

• financial — ACTIVE (12 signals, max sev 6): US student loan default wave is building following the lapse of pandemic-era protections. Analysis of US economic reliance on Amazon/nonstore retail is circulating globally.

• environmental — ACTIVE (11 signals, max sev 7): Minnesota wildfire smoke (the window's Lead Highlight) is the top environmental signal. Wildfire activity also noted in Wheeler County, Oregon (CROSSWHITE incident).

• disaster — ACTIVE (69 signals, max sev 7): Wildfire activity is the dominant thread (Oregon CROSSWHITE incident flagged globally). Russian/Ukrainian conflict damage reports are also generating signals.

Quiet: none.

---

Context / Watching

• Tropical Depression Two / TS Bertha (South Florida / Northern Gulf Coast): A tropical depression and associated Tropical Storm Warning and Storm Surge Watch are active along South Florida and the northern Gulf Coast. No geo_density workforce exposure resolved for this region.

• Venezuela earthquake (La Guaira): Death toll from the recent earthquake has topped 5,200 with rescue operations ongoing. No geo_density workforce exposure resolved for this region.

• Houthis declare Red Sea blockade on Saudi Arabia (Yemen): Houthi forces have announced a blockade targeting Saudi Arabia in the Red Sea. No geo_density workforce exposure resolved for this region.

• US-Canada tariff escalation (Washington, D.C.): The Trump administration is proposing a 50% tariff on a broad category of Canadian goods. No geo_density workforce exposure resolved for this event.

• France wildfire evacuations (southern France): A fire is forcing evacuations in a southern French town. No geo_density workforce exposure resolved for this event.

• New York Southern Tier tornado (United States): A tornado cut a 15-mile path through New York's Southern Tier region. No geo_density workforce exposure resolved for this event.

• Iran strikes on US military assets: Suspected Iranian strikes have targeted US military personnel in at least four countries. Classified as a non-WFM asset class (military/defense).

• Congo Ebola outbreak (Bunia, DRC): Deaths from the active Ebola outbreak have reached 930. No geo_density workforce exposure resolved for this region.

---

Active Incidents

• [OPEN | Cyber | Sev 10] HOLLOWGRAPH Espionage Campaign — Dallas-Fort Worth, TX: Microsoft 365 Calendar exploit targeting contact-center and knowledge-worker operations remains open. Security and IT teams at DFW sites should confirm M365 tenant isolation, audit calendar-sharing permissions, and verify endpoint detection coverage. WFM leaders should coordinate with IT on any potential system access restrictions that could affect scheduling platform availability.

• [OPEN | Weather | Sev 10] Tornado Watch — US Midwest: Active tornado watch across the US Midwest. Site safety protocols should be confirmed active for any Midwest locations with on-site staff. Real-time attendance monitoring is warranted for the duration of the watch.

• [OPEN | Weather | Sev 10] Orange Gale Warning — Central Poland (Łódź): Gale conditions are active for the central coastal zone of Poland. On-site attendance at Polish contact-center and BPO sites in the affected corridor should be monitored; commute disruption is the primary near-term staffing risk.

• [OPEN | Weather | Sev 10] Severe Heat Warning — Madrid, Spain: Extreme heat warning is active for Madrid and Cinco Villas de Zaragoza. Site climate control adequacy and welfare protocols for on-site staff should be confirmed. If cooling systems are under stress, contingency seating or early-release provisions may be warranted

External Corroboration

Independent external sources for today's lead highlights (via Exa), distinct from the internal signals above.

• When Will the Wildfire Smoke End? Latest Air Quality Updates and Maps — corroborated: nytimes.com, mprnews.org, fox9.com

Top Operational-Risk Signals — EMEA Window

The severity-ranked events on the board this window (last 8h). Included so an eventful-but-no-incident window still reads as a live board — the shelf is never silent.

• [weather] Sev 10 — "[Lodz] weather 10.0 — Orange Gale warning for Poland - Central coastal zone" (Lodz)

• [cyber] Sev 10 — "[Des Moines] cyber 10.0 — CISA Adds Four Known Exploited Vulnerabilities to Catalog" (Des Moines)

• [weather] Sev 10 — "[Lubuskie Province Gorzowski County] weather 10.0 — Red Thunderstorm warning for Poland - Lubuskie Province Gorzowski County" (Lubuskie Province Gorzowski County)

• [weather] Sev 10 — "[Lubuskie Province SulęCińSki County] weather 10.0 — Red Thunderstorm warning for Poland - Lubuskie Province Sulecinski County" (Lubuskie Province SulęCińSki County)

• [weather] Sev 10 — "[Lubuskie Province GorzóW Wielkopolski County] weather 10.0 — Red Thunderstorm warning for Poland - Lubuskie Province Gorzow Wielkopolski County" (Lubuskie Province GorzóW Wielkopolski County)

• [weather] Sev 10 — "[Us Midwest] weather 10.0 — Tornado Watch" (Us Midwest)

• [weather] Sev 10 — "[Kreis Anhalt Bitterfeld] weather 10.0 — Amtliche UNWETTERWARNUNG vor SCHWEREM GEWITTER mit ORKANBÖEN, EXTREM HEFTIGEM STARKREGEN und HAGEL" (Kreis Anhalt Bitterfeld)

• [weather] Sev 10 — "[Madrid] weather 10.0 — Severe high-temperature warning. Cinco Villas de Zaragoza" (Madrid)

Watching — Did Not Escalate

Candidates that were evaluated by admission control but did NOT rise to an incident (denies / suppressions / holds). Rejection is not disappearance — these remain on the shelf, visible.

• [cyber] "[Des Moines] cyber 10.0 — CISA Adds Four Known Exploited Vulnerabilities to Catalog" — evaluated and denied — no actionable WFM nexus (cyber_asset_deny)